Intel A31032-001 A P T E R Redirection Clients and Unsupported Ciphers, Intel 7115 set redirect

C H A P T E R 3 Redirection: Clients and Unsupported Ciphers

NOTE: The user must provide the redirect URL and ensure that it is available, as well as define the content of the redirect page.

WARNING: If the redirect URL causes a client to access the same 7110/7115 mapping that invoked the redirection an infinite loop condition will occur.

:

OTk3IFZlcmlTaWduMA0GCSqGSIb3DQEBAgUAA4GBALiMmMMr

SPVyzWgNGrN0Y7uxWLaYRSLsEY3HTjOLYlohJGyawEK0Rak6

+2fwkb4YH9VIGZNrjcs3S4bmfZv9jHiZ/4PC/

NlVBp4xZkZ9G3hg9FXUbFXIaWJwfE22iQYFm8hDjswMKNXRj

M1GUOMxlmaSESQeSltLZl5lVR5fN5qu

-----END CERTIFICATE	-----<Enter>
...<Enter>
Import successful!
Intel 7115>

Redirection: Clients and Unsupported Ciphers

When a client that does not support the selected cipher suite attempts to connect to the 7110/7115, the default behavior is to reject the connection, resulting in the client system reporting a fatal error. However, the 7110/7115 allows you to specify a “redirect address” where you can provide clients with additional information. The set redirect command allows you to specify a redirect Web address for any Map ID. The show redirect command displays any redirect addresses currently configured.

Intel 7115> list map
Map		Net	Ser	Cipher	Re-	Client
ID	KeyID Server IP	Port	Port	Suites	direct Auth
==	===== =========	====	====	======	=====	====
1	default Any	443	80	all(v2+v3) n		n
2	sample 10.1.2.5	443	80	med(v2+v3) n		n
Intel 7115> set redirect 2
Enter a redirect URL at			following prompt

e.g. http://www.e-comm_site.com/weakbrowser.html

Enter redirect URL []:http://www.e- comm_site.com/cipher_info.html

3-17